CVE-2001-1547

Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code...

CVE-2005-2226

Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information...

CVE-2005-2226

CVE-2005-2226 affects Microsoft Outlook Express 6.0. The issue leaks the default news server account when a user responds to a “watched” conversation thread, potentially allowing remote attackers to obtain sensitive information. The Red Hat and CVE listings reiterate the same description. No expl...

CVE-2005-2226

Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information...

MS KB900930: Microsoft Outlook Express Multiple Vulnerabilities

The remote host runs a version of Outlook Express that contains multiple vulnerabilities. An attacker may exploit these vulnerabilities to disable the Outlook Express client of a victim. To exploit these issues, an attacker would need to send a malformed email message to a victim and wait for him...

Microsoft Outlook Express Multiple Vulnerabilities

Description Microsoft has released an update to address various issues affecting Outlook Express 6.0 running on Windows XP. These issues may allow remote attackers to cause the client to crash or disclose sensitive information. Reportedly remote attackers may cause the client to crash by sending...

Outlook Express Multiple DoS

Binary data 3062.prm...

CVE-2004-2210

Technical details about CVE-2004-2210 are not publicly available in the provided Connected documents. Monitor for updates from vendors and security advisories.

Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)

Microsoft Outlook Express - NNTP Buffer Overflow MS05-030 include include include include pragma commentlib,"ws232" / win32bind - EXITFUNC=process LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char scode =...

Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)

include include include include pragma commentlib,"ws232" / win32bind - EXITFUNC=process LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char scode = "\x31\xc9\x83\xe9\xb0\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x96"...

MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)

Exploit for unknown platform in category remote exploits ========================================================== MS Outlook Express NNTP Buffer Overflow Exploit MS05-030 ========================================================== include include include include pragma commentlib,"ws232" /...

MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)

漏洞描述：Microsoft Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。Microsoft Outlook Express的新闻阅读功能中存在远程缓冲区溢出漏洞，可能允许攻击者以当前用户的权限执行任意代码。 具体的说，在发布LIST命令后解析NNTP服务器响应时会触发这个漏洞。位于C:\Program Files\Outlook Express\MSOE.DLL的MSOE.dll中的一个例程中存在栈溢出。以下地址和偏移基于Microsoft Windows 2000 SP4捆绑的MSOE.DLL...

Microsoft Outlook Express NNTP client buffer overflow

Buffer overflow on NNTP server reply parsing...

Outlook Express NNTP LIST Command Remote Overflow

Binary data 3013.prm...

iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability

Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=263&type=vulnerabilities June 14, 2005 I. BACKGROUND Microsoft Outlook Express is an e-mail and newsgroup client shipped with the Microsoft...

Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express (897715)

Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express 897715 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...

CVE-2004-2137

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information...

CVE-2004-2137

The CVE-2004-2137 issue affects Outlook Express 6.0 when users send multipart e-mail messages with the setting to “Break apart messages larger than.” The vulnerability is that BCC recipients are leaked to To/CC addresses during this process, potentially exposing sensitive contact information. The...

CVE-2005-1213

Microsoft Outlook Express NNTP LIST buffer overflow (CVE-2005-1213) affects MSOE.DLL in Outlook Express 5.5 SP2, 6 and 6 SP1. A crafted LIST response with a long second field allows a remote attacker to execute arbitrary code via the NNTP channel. The vulnerability arises from a stack-based buffe...

CVE-2005-1213

Stack-based buffer overflow in the news reader for Microsoft Outlook Express MSOE.DLL 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field...